1ong777 Privacy Policy – Our Commitment to Protecting Members' Personal Data in Malaysia

1ong777 takes our responsibilities seriously as the data controller for all personal information you share with us while using our online Sports Betting and casino platform. This Privacy Policy is designed to give you full transparency on how your data is handled – from the moment you complete the registration form, through every deposit transaction via Touch 'n Go eWallet or GrabPay, every Malaysia Super League football bet you place, and every Live Casino session you enjoy.

We understand that entrusting your personal information to any online platform requires genuine confidence. That is why we are committed to being the most transparent online betting platform in Malaysia when it comes to data protection — not merely meeting the minimum legal requirements, but truly treating your privacy as a core business value.

1. Personal Information We Collect

1ong777 collects various types of information depending on your level of interaction with our platform. This information is grouped into the following categories:

Account Registration Information:

• Full name as shown on your official Malaysian identification document
• An active Malaysian phone number (used for OTP verification and account communications)
• Password in encrypted form (1ong777 does not store passwords in plain text)
• Date of birth (for minimum age verification of 18 years)

Financial Transaction Information:

• Account number or digital wallet ID for registered payment methods (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or Malaysian bank account number)
• Deposit and withdrawal history including date, time, method, and amount in RM
• Transaction status and reference numbers for support and audit purposes

Platform Activity Information:

• Sports betting history – matches wagered on, odds accepted, and outcomes
• Casino game history – game types played, session duration, and general activity
• Promotions used and bonus status

Technical Information:

• IP address of the device used to access the platform (for security and fraud prevention purposes)
• Web browser or mobile app type and version
• Device operating system
• Session log data including login time, logout time, and session duration
• Cookie data as described in Section 6

Identity Verification (KYC) Information, where required:

• Digital copy of MyKad or a valid Malaysian identity document
• Proof of ownership of the payment method used
• Proof of residential address, where required for large withdrawal amounts

2. How We Collect Your Personal Data

1ong777 collects personal data through several different channels when you interact with our platform:

• Directly from you – when you fill in the registration form, complete your account profile, submit a KYC request, contact customer support, or participate in a survey or promotion.
• Automatically during platform use — through cookies, server logs, and similar tracking technologies that record your interactions with the 1ong777 platform for security and user experience improvement purposes.
• Via payment providers – when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other Malaysian payment method we support, the relevant payment provider shares the transaction information with us for the purposes of confirmation and record-keeping.
• Through game providers – licensed game providers such as Evolution Gaming and Pragmatic Play may process technical data during your gaming session; however, this data is governed by their respective privacy policies and is not shared with 1ong777 beyond what is required for game operation.

3. Purpose of Personal Data Use

1ong777 uses members' personal data solely for legitimate, stated purposes as outlined below. We do not use your data for any other purpose without first obtaining your additional consent:

You have the right to withdraw consent for the use of your data for marketing and promotional purposes at any time, without affecting the validity of any processing carried out prior to withdrawal. To opt out of promotional communications, contact our support team or update your communication preferences in your account settings.

4. Sharing Data with Third Parties

1ong777 does not sell, rent, or distribute members' personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data with the following parties in order for our platform to operate properly:

• Malaysian Payment Providers – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banking institutions receive the transaction information necessary to process your deposits and withdrawals. This sharing is strictly limited to the information required.
• Licensed Game Providers – Providers such as Evolution Gaming, Pragmatic Play, Microgaming, and others receive only the minimum technical data required to run games within the 1ong777 platform. They are bound by data protection agreements with 1ong777.
• Infrastructure Service Providers – Companies providing cloud computing, data storage, and cybersecurity services that enable the 1ong777 platform to operate. All such providers are subject to strict data processing agreements.
• Regulatory Authority — In situations required by Malaysian law or a valid court order, 1ong777 may be obligated to disclose member data to the relevant authorities. We will inform the affected member to the extent permitted by law.

5. Data Security & Protection

1ong777 continually invests in robust security infrastructure to protect members' personal data from cyber threats, unauthorised access, and data breaches. The technical and organisational security measures we have in place include:

• 256-bit SSL/TLS Encryption for all communications between your device and 1ong777's servers – data in transit cannot be read by any intermediary party.
• AES-256 data-at-rest encryption for all sensitive data stored in our databases, including payment information and KYC documents.
• Role-based access control (RBAC) which ensures 1ong777 staff can only access the data necessary to carry out their specific role.
• Two-factor authentication (2FA) for all internal staff accounts with access to member data systems.
• 24/7 security monitoring by an automated intrusion detection system that identifies and responds to suspicious activity in real time.
• Regular security audits by an independent certified cybersecurity firm to assess and strengthen our platform's security posture.
• Regular data backups with tested disaster recovery procedures in place to ensure service continuity and data integrity.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in securing your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly at support@1ong777.xyz.

6. Cookie Policy

The 1ong777 platform uses cookies — small text files stored on your device when you visit our website — to enhance your user experience and ensure the platform functions properly. There are four types of cookies we use:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 1ong777 platform and prevent you from logging in or completing transactions. For mobile users, cookie settings can be managed through your mobile browser's privacy settings.

7. Member Rights Regarding Personal Data

As a 1ong777 member and as an individual whose personal data is processed by us, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) team by email at privacy@1ong777.xyz, stating the right you wish to exercise and providing sufficient information to verify your identity. We will respond within 30 business days of receiving your request.

8. Protection of Children's Data

1ong777 services are intended for individuals aged 18 and above only. Our platform is not designed, targeted at, or intended for use by minors. We do not knowingly collect personal data from any individual under the age of 18.

If you believe we have inadvertently collected personal data from someone under the age of 18, please notify us immediately at privacy@1ong777.xyz. We will take prompt action to verify and delete the data in question, and close the associated account without delay.

Parents and guardians concerned about underage use of online betting platforms are encouraged to use the parental control features available on their devices and web browsers to restrict access to online gambling sites.

9. Cross-Border Data Transfers

In the course of its operations, 1ong777 may transfer members' personal data to servers located outside Malaysia – primarily for cloud computing infrastructure providers and licensed international game providers.

When such data transfers occur, 1ong777 ensures adequate protections are in place through the following mechanisms:

• Legally binding data processing agreements (DPA) with all third-party service providers that handle our members' data.
• Ensuring that data recipients outside Malaysia maintain data protection standards equivalent to or stricter than the minimum requirements applicable to 1ong777.
• Use of standard contractual clauses, recognised as a valid data transfer mechanism, to ensure continuous protection of member data regardless of server location.

You may request further details about the specific data transfer mechanisms we use by contacting our DPO at privacy@1ong777.xyz.

10. Data Retention Period

1ong777 only retains members' personal data for as long as necessary to fulfil the purpose for which it was collected, or to meet any applicable legal obligations. Our general data retention guidelines are as follows:

• Active account data — retained for the duration your account remains active and for a further 5 years after account closure for record-keeping and regulatory compliance purposes.
• Financial transaction records – retained for a minimum of 7 years from the date of transaction, in accordance with AML compliance requirements and Malaysian financial reporting laws.
• KYC Documents — retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with AML compliance requirements.
• Security & Audit Logs – retained for 12 months for the purposes of security incident investigation and dispute resolution.
• Customer support communication data – retained for 3 years from the date of the last interaction.
• Inactive account data — accounts that have been inactive for more than 24 months are subject to an archiving process. Data will be archived and permanently deleted after 5 years of inactivity.

Once the applicable retention period expires, your personal data will be securely and irreversibly deleted or anonymised.

11. Amendments to This Privacy Policy

The data privacy landscape is constantly evolving, and a sound privacy policy must evolve with it to reflect changes in practices, technology, and legal requirements. 1ong777 reserves the right to amend this Privacy Policy at any time as needed.

For any material amendments – meaning changes that significantly affect how we handle members' personal data – we are committed to:

• Sending email notifications to all registered members at least 14 days before any amendment takes effect.
• Displaying a prominent notice on the 1ong777 platform homepage for a period of at least 14 days.
• Updating the "Effective date" at the top of this document.
• Providing a plain-language summary of key changes, rather than legal language alone.

Continued use of the 1ong777 platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with any amendment, you have the right to close your account and request data deletion before the amendment takes effect.

12. Contact Us About Privacy

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 1ong777, please contact us through the following channels:

We encourage you to reach out to us first before filing a complaint with a data protection authority. In most cases, we are able to resolve privacy concerns quickly and satisfactorily through direct communication. That said, you always retain the right to lodge a complaint with the relevant authority if you feel your concerns have not been adequately addressed by 1ong777.